Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/F3dbh4Bq7z5dxqyhkbqoZCM5YMRoB5cFiZFRjj5QDBVJ/0/0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384.mft
File:                     0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384.mft (raw, json)
Hash identifier:          mK8Vnsf4U5yy28/jPuVGNLwoI2LaQRctuhojiF+O6Ms=
Subject key identifier:   8F:14:7A:13:AD:54:57:4A:C3:69:3F:BC:B2:2E:34:5F:56:90:35:04
Authority key identifier: 0B:D6:FA:DA:5B:9D:4A:CC:75:21:C6:41:3D:70:0E:E9:DC:D4:E3:84
Certificate issuer:       /CN=0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384
Certificate serial:       5FDF6F07790495AA3372E47181EB880E9948CDD5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F3dbh4Bq7z5dxqyhkbqoZCM5YMRoB5cFiZFRjj5QDBVJ/0/0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384.mft
Manifest number:          1F
Signing time:             Fri 08 Aug 2025 09:21:04 +0000
Manifest this update:     Fri 08 Aug 2025 09:16:04 +0000
Manifest next update:     Sat 09 Aug 2025 10:02:04 +0000
Files and hashes:         1: 3137372e32302e302e302f32342d3234203d3e203533323339.roa (hash: /2GWplI6VPMjIQxPzipiyRkOYu19gNVbe7H041O3ADE=)
                          2: 3137372e32302e31382e302f32342d3234203d3e203533323339.roa (hash: CkgTxii2Kp16nmdRw+KLRczB8ShVmNwsiDP+92heWAc=)
                          3: 3137372e32302e322e302f32342d3234203d3e203533323339.roa (hash: 4cNE65nzvUKwnEDl+uQs490RROMq73wKQpqtEPMucZk=)
                          4: 3137372e32302e302e302f32302d3230203d3e203533323339.roa (hash: 4Gq84VguyrtK/9sOjynFfKy6MRblO8852wYmPrzzcsU=)
                          5: 3137372e32302e32312e302f32342d3234203d3e203533323339.roa (hash: TVsWrs/UASGwRbZwbxX2Ot1kmbvETm272AKmGakZoJY=)
                          6: 3137372e32302e302e302f31372d3137203d3e203533323339.roa (hash: fFb+AdPhxR2TSvH4x3YaoqVtCcYBEVVYvifBGcj6M/s=)
                          7: 0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384.crl (hash: exOfh11StF0BiVmQkPWnnmPoSP3EgJ7IB+AXSjP+Ze4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F3dbh4Bq7z5dxqyhkbqoZCM5YMRoB5cFiZFRjj5QDBVJ/0/0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384.crl
                          rsync://rpki-repo.registro.br/repo/F3dbh4Bq7z5dxqyhkbqoZCM5YMRoB5cFiZFRjj5QDBVJ/0/0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 10:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:df:6f:07:79:04:95:aa:33:72:e4:71:81:eb:88:0e:99:48:cd:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384
        Validity
            Not Before: Aug  8 09:16:04 2025 GMT
            Not After : Aug  9 10:02:04 2025 GMT
        Subject: CN=8F147A13AD54574AC3693FBCB22E345F56903504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:34:30:5f:f9:5b:05:17:79:36:fc:9e:90:66:
                    31:c0:4d:03:aa:e5:c4:24:95:d3:86:67:22:57:fe:
                    bb:77:e8:e7:33:dd:2a:7b:79:77:6d:75:83:c0:d7:
                    ce:14:0a:fc:c2:39:f5:54:d2:ed:7b:75:89:53:44:
                    98:b2:8c:b0:4e:39:58:ae:92:fd:0f:02:54:fc:f3:
                    dd:ac:22:a9:3b:80:cb:ec:4e:bc:4b:50:ff:61:23:
                    f3:12:ed:78:2b:b8:f9:0a:54:e5:8a:6d:a1:9e:b9:
                    26:45:a9:2d:13:25:bf:06:f0:3c:3d:27:5d:46:bc:
                    37:e6:a9:c5:4f:90:15:bc:6c:36:94:fe:92:13:d8:
                    7c:2b:9d:43:1c:91:1c:5a:e6:7f:0b:a5:a6:ec:c7:
                    c0:e1:b9:3e:38:25:bd:6d:d8:de:f2:d6:4f:02:2b:
                    1e:a3:99:17:b9:4c:8c:a8:09:20:f8:fb:a4:74:4e:
                    c6:36:b0:e0:33:8c:32:9a:69:1f:b3:d5:c8:cd:4c:
                    13:0d:88:c3:8b:21:8d:a1:83:78:0e:e4:3a:e2:1e:
                    01:c4:11:ed:ba:a4:a4:db:eb:91:18:f2:32:71:91:
                    fc:a1:4a:93:ff:bc:0a:cc:7c:7e:43:f7:e4:3c:12:
                    1f:4d:23:bc:ec:29:10:9b:3d:53:15:c0:ad:6a:b9:
                    b3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:14:7A:13:AD:54:57:4A:C3:69:3F:BC:B2:2E:34:5F:56:90:35:04
            X509v3 Authority Key Identifier:
                keyid:0B:D6:FA:DA:5B:9D:4A:CC:75:21:C6:41:3D:70:0E:E9:DC:D4:E3:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F3dbh4Bq7z5dxqyhkbqoZCM5YMRoB5cFiZFRjj5QDBVJ/0/0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F3dbh4Bq7z5dxqyhkbqoZCM5YMRoB5cFiZFRjj5QDBVJ/0/0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:7a:da:58:64:05:3a:ad:ec:4c:32:36:7c:be:4a:0e:16:46:
         97:0d:f2:c1:21:c5:65:70:de:02:b8:e5:5b:50:b3:11:65:6a:
         86:34:5a:ac:28:bb:87:56:a3:33:00:eb:57:c0:89:7e:6d:38:
         d8:28:b0:80:b1:51:88:c3:4c:90:9c:9f:1e:01:6d:8f:cb:3a:
         d6:aa:a4:9c:33:03:aa:f6:2a:9a:57:4a:36:b3:63:b5:de:8b:
         bf:43:a7:64:a1:4f:a0:8e:1e:4f:c9:17:57:b5:a4:72:6e:5a:
         56:5c:2c:2e:f3:0d:dc:b0:c1:81:cb:72:e0:54:d4:d8:63:83:
         6a:61:78:9b:77:37:98:fe:56:fc:9d:d6:a7:e2:35:a3:4d:48:
         9e:91:8f:b0:e6:7a:74:96:3e:26:72:4c:b0:8e:14:54:ec:f9:
         85:14:d9:6c:9f:1f:08:23:53:76:d0:61:15:a9:2b:e1:53:18:
         f6:0d:c8:de:3c:2e:a9:63:d7:ab:8c:44:35:61:40:6e:34:41:
         3b:cf:f7:56:43:0e:9b:9c:29:1b:36:50:79:71:44:61:3a:bb:
         33:c9:30:9a:6f:86:69:c0:f3:f7:f0:90:e2:10:cb:10:05:03:
         c0:a3:ed:3e:dc:af:21:20:b7:d9:52:65:42:ab:41:cd:bc:65:
         2b:e3:2b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:48:09 2025 by rpki-client